
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
File: 5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json)
Hash identifier: 97sk5xBhbBKJJIrQITXvbZzCguSMhdB8o3KuTyocD3E=
Subject key identifier: 34:65:B0:19:01:AE:7C:9A:DA:26:64:C8:97:34:93:E3:52:93:F4:9A
Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
Manifest number: D9
Signing time: Sun 19 Apr 2026 06:17:41 +0000
Manifest this update: Sun 19 Apr 2026 06:17:41 +0000
Manifest next update: Sun 26 Apr 2026 06:17:41 +0000
Files and hashes: 1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: CBMQInHg1mWwMpTAVa5mRtjtoo3Chn+QiLJu3lHu3QA=)
2: E0E5603A371611F0A29AF975C4F9AE02.roa (hash: C3aagPpa6AuSNI4mAxmbbsp6/a45ylNp6b8evhWo/ho=)
3: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: rUwmt+bo32fXyc76egq+OZINFYA/ahBwXXwNyoCKn6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Validity
Not Before: Apr 19 06:17:41 2026 GMT
Not After : Apr 26 06:17:41 2026 GMT
Subject: CN=69e47385-1330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4b:f6:6d:37:26:8d:3c:78:98:31:ef:b0:68:
07:ad:08:06:89:24:0e:89:08:4f:26:db:8d:80:d8:
8a:21:6e:76:81:22:dd:e6:d7:1b:22:71:33:49:f7:
78:dd:c7:56:90:08:7d:6b:c8:e7:e4:19:58:67:a6:
46:c9:0b:4c:1c:5f:33:dd:a2:c9:ab:5c:8b:c5:f1:
c2:12:8d:81:53:0c:c4:08:d0:45:14:30:0a:a8:66:
3d:2d:85:e4:c2:96:4e:1f:fc:d7:25:be:4d:d1:81:
7d:54:b6:7c:99:d7:0c:b9:7d:bc:e5:86:f6:4d:79:
9e:f6:7c:d2:48:a7:59:e9:27:5a:46:04:48:00:67:
43:bb:25:f9:7c:94:a4:1f:ae:10:46:ff:33:fd:75:
13:2e:15:b0:0b:d9:5a:bd:68:16:23:2f:41:cc:9c:
b0:62:2b:66:f8:90:d2:5f:be:68:6d:1e:53:8f:37:
ce:60:76:ed:b2:3e:58:5d:68:7a:cc:99:3e:7a:38:
e4:ae:a7:73:d7:fa:d6:c2:4d:0f:6e:64:11:c0:63:
9b:2b:ea:66:52:83:70:cb:35:43:3d:36:81:28:9e:
c6:00:bd:fd:c8:64:5e:75:7c:c0:b5:30:9f:33:47:
05:45:58:b6:5f:d6:45:c0:c6:4e:7a:9f:af:ff:e5:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:65:B0:19:01:AE:7C:9A:DA:26:64:C8:97:34:93:E3:52:93:F4:9A
X509v3 Authority Key Identifier:
keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:57:b1:79:27:e4:31:64:c0:6c:7f:e4:be:52:8a:ed:78:0a:
e1:0b:fc:0d:f9:06:c1:f7:74:4f:30:6d:96:d2:da:36:29:30:
d0:49:4f:14:72:38:dd:16:5b:4f:27:8d:25:bb:50:07:9d:e2:
b8:13:90:26:56:27:2b:77:d0:5b:45:97:3f:ae:cf:12:3e:7f:
5f:8f:35:21:0c:78:64:09:d0:0d:f4:4c:44:eb:89:59:62:de:
c6:13:ec:9a:78:1f:20:b9:b4:89:b6:bc:29:03:8d:04:1b:ab:
ed:51:6e:a1:10:4f:cf:65:e8:d6:b3:cc:69:74:b7:41:e5:b2:
b9:26:aa:39:7f:b2:65:b0:63:48:fe:69:7f:27:e6:00:7a:a1:
84:21:af:2a:1b:4f:05:22:be:5b:1f:24:5e:76:a4:d1:c9:e9:
a9:f3:f3:b0:86:c6:64:25:c2:f5:a1:8b:24:6a:ec:f9:aa:9d:
a7:79:86:1f:ea:5a:6a:d1:56:35:13:75:5d:0c:ed:42:f3:80:
dd:7b:2d:8a:42:b8:6f:f5:29:26:34:a2:93:32:b9:76:2a:d4:
99:20:f4:a9:69:ee:15:a3:69:e9:1b:28:9a:79:6d:83:b7:4a:
2d:97:9f:a7:db:7b:8b:b8:7b:13:5f:77:da:10:b1:f4:fd:c1:
03:07:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:20 2026 by rpki-client